CVE-2021-27947

CVE-2021-27947 describes a SQL injection in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. Affected: MyBB versions prior to 1.8.26. Root cause: unsafe handling of input in the Copy Forum functionality leading to SQL injection. Impacts documented include potential data exposure...

CVE-2021-27947

SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. issue 2 of 3...

CVE-2021-27946

CVE-2021-27946 : MyBB before 1.8.26 is vulnerable to an SQL injection in the poll vote count due to lack of sanitization of the votes[] parameter in Edit Poll. Exploitation can occur during a Move/Copy operation and may enable privilege escalation for moderators/administrators in some configurati...

CVE-2021-27946

SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. issue 1 of 3...

CVE-2021-27890

SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files...

CVE-2021-27890

Summary of CVE-2021-27890 (MyBB SQL Injection) Affects MyBB versions prior to 1.8.26, where a SQL injection vulnerability exists via theme properties included in theme XML files. The issue is described as a SQL Injection vulnerability without publicly detailed exploit steps in the initial descrip...

CVE-2021-27889

CVE-2021-27889 is an XSS vulnerability in MyBB’s message parsing via Nested Auto URLs present in versions prior to 1.8.26. The issue arises when processing user-supplied content, potentially allowing an attacker to inject HTML/JS in forums, posts, or private messages. Public sources (NVD) describ...

CVE-2021-27889

Cross-site Scripting XSS vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages...

PT-2021-17687 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.26 Description: The issue is related to a SQL Injection vulnerability. It can be exploited via the Copy Forum feature in Forum Management. Recommendations: For versions prior to 1.8.26, update to version 1.8.26 or...

MyBB SQL注入漏洞

MyBB is a free open source forum software. A SQL injection vulnerability exists in the Copy Forums feature of the Forum Manager in versions of MyBB prior to 1.8.26. No detailed vulnerability details are available at this time...

MyBB 跨站脚本漏洞

MyBB is a free open source forum software. A cross-site scripting vulnerability exists in the parsing of messages in Nested Auto URLs in versions of MyBB prior to 1.8.26. No details of the vulnerability are provided at this time...

MyBB SQL注入漏洞

MyBB is a free open source forum software. A SQL injection vulnerability exists in vote counting in versions of MyBB prior to 1.8.26, no details of the vulnerability are available at this time...

MyBB SQL注入漏洞

MyBB is a free open source forum software. A SQL injection vulnerability exists in the theme properties of MyBB versions prior to 1.8.26. No detailed vulnerability details are provided at this time...

PT-2021-17649 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.26 Description: The issue is related to SQL Injection vulnerability in MyBB, which occurs via theme properties included in theme XML files. Recommendations: For versions prior to 1.8.26, update to version 1.8.26 or...

MyBB SQL注入漏洞

MyBB is a free open source forum software. A SQL injection vulnerability exists in user groups in versions of MyBB prior to 1.8.26. No detailed vulnerability details are provided at this time...

PT-2021-17648 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.26 Description: The issue is related to a Cross-site Scripting XSS vulnerability. It occurs when parsing messages, specifically via Nested Auto URL. This vulnerability can be exploited to execute malicious scripts o...

PT-2021-17686 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.26 Description: The issue is related to a SQL Injection vulnerability. It can be exploited via the poll vote count. Recommendations: For versions prior to 1.8.26, update to version 1.8.26 or later to resolve the iss...

PT-2021-17689 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.26 Description: The issue is related to a Cross-site Scripting vulnerability. It affects the Custom moderator tools in MyBB. Recommendations: For versions prior to 1.8.26, update to version 1.8.26 or later to resolv...

MyBB OUGC Feedback Plugin 1.8.22 - Cross-Site Scripting Vulnerability

Exploit Title: MyBB OUGC Feedback Plugin 1.8.22 - Cross-Site Scripting Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=1220 Version: 1.8.22 Tested on: Windows 10 CVE: CVE-2021-28115 1. Description: This plugin adds a feedback...

MyBB OUGC Feedback 1.8.22 Cross Site Scripting

Exploit Title: MyBB OUGC Feedback Plugin 1.8.22 - Cross-Site Scripting Date: 1/30/2021 Author: 0xB9 Twitter: @0xB9Sec Contact: 0xB9atpm.me Software Link: https://community.mybb.com/mods.php?action=view&pid=1220 Version: 1.8.22 Tested on: Windows 10 CVE: CVE-2021-28115 1. Description: This plugin...